nullfiles -------- Help !!!

[Wizard]

In my right click new menu, there are items involving 2 programs that
should not be there. When I click them they drop a file that seems to
be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the nullfile
and right click new menu item returns. Same if I delete the entire
..hnq folder from the registry.

I have another program (Winrar) with the same problem on the right
click new menu. I have not been able to locate the problem reg key.

This occurs for all users.

Any ideas? I have spent hours researching this and not found an
answer that works.

Thanks.

 

[Mark V]

In my right click new menu, there are items involving 2 programs that
should not be there. When I click them they drop a file that seems to
be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the

What is the program?

Is this related?
http://hunter.11s.com/
"Hunter Collection Manager"

 

[Wizard]

Yes, Hunter is one of the programs.

In my right click new menu, there are items involving 2 programs that
should not be there. When I click them they drop a file that seems to
be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the

What is the program?

Is this related?
http://hunter.11s.com/
"Hunter Collection Manager"

nullfile
and right click new menu item returns. Same if I delete the entire
.hnq folder from the registry.

I have another program (Winrar) with the same problem on the right
click new menu. I have not been able to locate the problem reg key.

This occurs for all users.

Any ideas? I have spent hours researching this and not found an
answer that works.

 

[Tom]

In my right click new menu, there are items involving 2 programs that
should not be there. When I click them they drop a file that seems to
be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the nullfile
and right click new menu item returns. Same if I delete the entire
..hnq folder from the registry.

I presume the registry key is recreated?
Some programs just like infesting your system - PaintShopPro is another like
that, and there are many more. I have had to schedule a script which removes
these items (delete the regkeys) more often than I use the programs.
hth.

 

[Wizard]

In my right click new menu, there are items involving 2 programs that
should not be there. When I click them they drop a file that seems to
be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the nullfile
and right click new menu item returns. Same if I delete the entire
..hnq folder from the registry.

I presume the registry key is recreated?
Some programs just like infesting your system - PaintShopPro is another like
that, and there are many more. I have had to schedule a script which removes
these items (delete the regkeys) more often than I use the programs.
hth.

Yes, actually 4 reg keys are recreated. I have been running this
program and Winrar some time with no problems.

Something else is causing it. I just dont know where to look.

 

[Mark V]

In my right click new menu, there are items involving 2 programs
that should not be there. When I click them they drop a file
that seems to be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the
nullfile and right click new menu item returns. Same if I delete
the entire ..hnq folder from the registry.

I presume the registry key is recreated?
Some programs just like infesting your system - PaintShopPro is
another like that, and there are many more. I have had to schedule
a script which removes these items (delete the regkeys) more often
than I use the programs. hth.

Yes, actually 4 reg keys are recreated. I have been running this
program and Winrar some time with no problems.

Something else is causing it. I just dont know where to look.

I use neither of the two programs, but agree with Tom that in general
some application are written to check and re-create keys and values
upon every execution.

Since you say the behavior there has changed, and presumably no
"options"/"preferences" were altered, I'd suggest getting the free
tool REGMON http://www.sysinternals.com/ntw2k/source/regmon.shtml
Monitor and observe if any process unexpectedly writes in those
locations. Or exactly when either app. is writing to them.

 

[Tom]

In my right click new menu, there are items involving 2 programs that
should not be there. When I click them they drop a file that seems to
be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the nullfile
and right click new menu item returns. Same if I delete the entire
..hnq folder from the registry.

I presume the registry key is recreated?
Some programs just like infesting your system - PaintShopPro is another like
that, and there are many more. I have had to schedule a script which removes
these items (delete the regkeys) more often than I use the programs.
hth.

Yes, actually 4 reg keys are recreated. I have been running this
program and Winrar some time with no problems.

Something else is causing it. I just dont know where to look.

Mark has some good advice.
If it is the program then there is probably little you could do, however I've
used a combination of the following to keep programs out of my 'new' menu..

a .reg file (or script) to delete the offending keys on a regular schedule
a script to start the program, then delete the keys after a short delay.
TweakUI has a 'new' tab which seems to be very effective.

Curiously, the 'new' menu doesn't always refresh the first time it is called.
You may have to open the menu a couple of times to see any changes.

You might be able to prevent the program writing to the registry, but usually
you need to delete the keys after the event. This problem is compounded when the
program was installed using windows installer. They seems to want to throw up an
error if they can't write all over your registry, start menu, desktop, etc...
every time they run.

I use Winrar 2.90, and I have it blocked from creating any 'new' entries with
the 'new' tab in TweakUI if that helps.. I have no idea if it's necessary, but I
obviously did once.
hth.

 

[Wizard]

Wizard wrote:

In my right click new menu, there are items involving 2 programs that
should not be there. When I click them they drop a file that seems to
be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the nullfile
and right click new menu item returns. Same if I delete the entire
..hnq folder from the registry.


I presume the registry key is recreated?
Some programs just like infesting your system - PaintShopPro is another like
that, and there are many more. I have had to schedule a script which removes
these items (delete the regkeys) more often than I use the programs.
hth.

Yes, actually 4 reg keys are recreated. I have been running this
program and Winrar some time with no problems.

Something else is causing it. I just dont know where to look.

Mark has some good advice.
If it is the program then there is probably little you could do, however I've
used a combination of the following to keep programs out of my 'new' menu..

a .reg file (or script) to delete the offending keys on a regular schedule
a script to start the program, then delete the keys after a short delay.
TweakUI has a 'new' tab which seems to be very effective.

Curiously, the 'new' menu doesn't always refresh the first time it is called.
You may have to open the menu a couple of times to see any changes.

You might be able to prevent the program writing to the registry, but usually
you need to delete the keys after the event. This problem is compounded when the
program was installed using windows installer. They seems to want to throw up an
error if they can't write all over your registry, start menu, desktop, etc...
every time they run.

I use Winrar 2.90, and I have it blocked from creating any 'new' entries with
the 'new' tab in TweakUI if that helps.. I have no idea if it's necessary, but I
obviously did once.
hth.

I have been playing with regmon. It seems that Hunter is looking for
an open key in HKCU. It does not find one , then writes the nullfile
key to HKCR. Hunter has a reg file in the program directory. Viewing
it , gives no indication of the problem and the entries go to HKCR (No
mention of nullfiles).The entries in it are in the windows registry.

BTW, Hunter runs from a dir, is a no install proggy.

Also the first dir in HKCR is labeled * . Inside are property sheet
handlers and context menu handlers. That is getting beyond what I
understand.

I have Winrar 3.40. Have never had a problem with it adding unwanted
entries before. I do not see any reference to nullfiles for Winrar in
the reg.

This is more of an annoyance than a real problem. As long as I delete
the dropped files rather than click them, there is no problem with
either program. I found that out after clicking on a dropped file and
screwing up the .ini file for one program..

Is TweakUI a download from MS ? Does it sound like it might help?

Thanks

 

[Mark V]

Wizard wrote:

In my right click new menu, there are items involving 2
programs that should not be there. When I click them they drop
a file that seems to be a shortcut to a program.

Looking in H_key classes root, I find entries like this:

[HKEY_CLASSES_ROOT\.hnq]
@="HunterCsvQuickHunt.Document"

[HKEY_CLASSES_ROOT\.hnq\ShellNew]
"NullFile"=""

If I delete the nullfile, as soon as I use the program, the
nullfile and right click new menu item returns. Same if I
delete the entire ..hnq folder from the registry.


I presume the registry key is recreated?
Some programs just like infesting your system - PaintShopPro is
another like that, and there are many more. I have had to
schedule a script which removes these items (delete the
regkeys) more often than I use the programs. hth.


Yes, actually 4 reg keys are recreated. I have been running
this program and Winrar some time with no problems.

Something else is causing it. I just dont know where to look.

Mark has some good advice.
If it is the program then there is probably little you could do,
however I've used a combination of the following to keep programs
out of my 'new' menu..

a .reg file (or script) to delete the offending keys on a regular
schedule a script to start the program, then delete the keys after
a short delay. TweakUI has a 'new' tab which seems to be very
effective.

Curiously, the 'new' menu doesn't always refresh the first time it
is called. You may have to open the menu a couple of times to see
any changes.
You might be able to prevent the program writing to the registry,

Tom, I think that is all there is left to try. If app runs under
other than Administrators group.
From other admin account
delete NullFile valuename,
alter ACLs. Ensure ACE for AccountInQuestion set READ and DENY WRITE
or something along those lines?

Wizard, wait for feedback perhaps. Backup. Take notes...
AND, there is no telling in advance how the application will fail the
registry write. Gracefully, or not.

I have been playing with regmon. It seems that Hunter is looking
for an open key in HKCU. It does not find one , then writes the

Guess: Looking to usrclass.dat for per-user ".hnq"

Another guess: you are runing with an Administrators Group member
account. If true that may exclude above mentioned Reg Permissions
idea.

nullfile key to HKCR. Hunter has a reg file in the program
directory. Viewing it , gives no indication of the problem and the
entries go to HKCR (No mention of nullfiles).The entries in it are
in the windows registry.

It is almost certainly within the program executable.

BTW, Hunter runs from a dir, is a no install proggy.

Also the first dir in HKCR is labeled * . Inside are property
sheet handlers and context menu handlers. That is getting beyond
what I understand.

"Normal" Nothing there regarding Hunter though, right?

 

[Tom]

I have been playing with regmon. It seems that Hunter is looking for
an open key in HKCU. It does not find one , then writes the nullfile
key to HKCR. Hunter has a reg file in the program directory. Viewing
it , gives no indication of the problem and the entries go to HKCR (No
mention of nullfiles).The entries in it are in the windows registry.

It will very probably execute the shellnew rewrite command internally.

Also the first dir in HKCR is labeled * . Inside are property sheet
handlers and context menu handlers. That is getting beyond what I
understand.

This is the registry key for 'every file', give or take. That's when you
right-click on any file and see the same item in the menu. Often used by text
editors and compression programs which operate on any kind of file. Most
programs have an option to turn this off. If you're really bored you could look
up the {clsid} in hkcr\clsid.

This is more of an annoyance than a real problem. As long as I delete
the dropped files rather than click them, there is no problem with
either program. I found that out after clicking on a dropped file and
screwing up the .ini file for one program..

I don't understand 'dropped files'. TweakUI will probably help.

http://www.google.com/search?q=tweakui

 

[Wizard]

It will very probably execute the shellnew rewrite command internally.


This is the registry key for 'every file', give or take. That's when you
right-click on any file and see the same item in the menu. Often used by text
editors and compression programs which operate on any kind of file. Most
programs have an option to turn this off. If you're really bored you could look
up the {clsid} in hkcr\clsid.

Never done that before , but think I know how. What fun

I don't understand 'dropped files'. TweakUI will probably help.

What I meant by dropped file is if I click one of the offenders in the
right click new menu, a new shortcut? is created in the open dir or
desktop. The file is not marked as a shortcut. If I click it, the
program opens usually with an error.

Thanks to you both for the suggestions, I will go play with it and see
what happens.